I am running Acrobat Reader 11.0.0 in a XenApp 6.5 Environment on Windows Server 2008 R2 SP1. We have recently started using Mandatory profiles and the option set to delete cached profiles on logoff. We have started noticing that some of the profiles are not being deleted because of files that are locked by the system. The files are named Z@*.tmp. I have done some research into the issue and have found an article on your website that mentions this issue specifically:

Please note this article is dated 11/2011 and seems to refer only to XP, NT, and 2003 server. Also at the bottom of the article it states the following:Following our testing we have discovered that the issue does not occur in Windows 7, or Windows 2008 Server. It seems that the updated versions of Windows provide a solution to this issue. We would therefore recommend updating your OS if possible.

I have found that this is not that case and this issue seems to remain, at least in my configuration.

When a user logs off, their roaming profile is normally deleted on the Citrix server. However, Adobe Reader s leaving a number of Z@R****.tmp files in Appdata\Local\Temp\<number>\ that are locked and cannot be deleted until the server is rebooted. This is preventing profiles from being deleted properly upon logoff.

We do have KB2993651 installed and the problem started around that time.

Microsoft says:

Known issue 1

After you install this security update, fonts that are installed in a location other than the default fonts directory (%windir%\fonts\) cannot be changed when they are loaded into any active session. Attempts to change, replace, or delete these fonts are blocked, and a "File in use" message is displayed.

I have seen temp files being created and successfully cleaned after printing a PDF as you just did, but they didnt have the Z@*.tmp names.

I followed these steps now:

1. Uninstalled KB2976897 aswell (KB2993651 was uninstalled before)

2. Rebootet server

3. Cleaned old local profiles under C:\Users

4. Logged in as user and printed a PDF to a real printer (-> Z@R*.tmp files were being created)

5. Closed AcrobatReader (-> temp files are still there and locked)

6. Logged off the server (-> local profile is not deleted)

But I noticed, that only some PDF files (with a lot of fonts included) produced Z@*.tmp files. Other dont create any temp file in that location (scanned images, no fonts included). Others again create A*.tmp files, wich are deleted when closing AcrobatReader.

It appears to vary from PDF to PDF ... I do see the A*.tmp files created along with the Z@*.temp files when printing some PDFs. However, the A*.tmp files are being deleted when Acrobat Reader closes whereas the z@*.tmp files do not delete on the servers that still have the KB2993651 update.

@StefanSch, could it be that you only uninstalled KB2993651, while it's predecessor KB2982791 is still installed on the system? If this is the case I assume you have to uninstall KB2982791 as well before the problem indeed is solved.

@Caorthann, great to see you are having more success. Did you have to uninstall KB2976897 as well?

Good luck. I don't hold much hope for this, as we don't have KB2970228 installed on our system yet we do have the same issue. I'm going to propose uninstalling KB2993651 and KB2982791 to our change manager. Will keep you updated on the results.

Known issues of this security update

Known issue 1

After you install this security update, fonts that are installed in a location other than the default fonts directory (%windir%\fonts\) cannot be changed when they are loaded into any active session. Attempts to change, replace, or delete these fonts are blocked, and a "File in use" message is displayed.

Hi everyone. I currently have a Citrix Xenapp farm (provisioning services), on 6.5 2K8 R2 servers. I was also having these issues and only a reboot of the Xenapp server would clear these temps files. I was able to rename these files but could not delete them. This was causing Profile Manager to have entries all over my servers.

But the solution for me was doing the following 3 things and which cleared this issue :

1) Remove KB2970228

2) Remove KB2993651

3) Finally I removed adobe reader and reinstalled it from the adobe site (11.0.9).

This setup has been live for 10 days without issues. I reapplied those patches on a test server and issues came back. Thus I will be avoiding both patches for a while until another comes up that resolves the issue. Hopefully this works for all of you.

We have had multiple customers with this problem. At almost all sites the solution was: remove KB2993651 (and KB2970228).

Now we have 1 site where KB2970228 was not installed and KB2993651 was. Sites is MSFT 2008 R2 XenApp 6.5 Rollup 4 and Adobe Reader 11.0.0.9. I removed KB2993651 but the issue remains.

I checked all KB's (KB2970228 KB2993651 KB2982791 KB2975719 KB2975331) but none are installed. This customers prints PDF a lot. Like more then 200 per day. Please provide a fix for it Adobe! The customer is already asking us if it's ok to use Foxit (which does not have this problem!)

It looks as if this is working exactly as Microsoft intended. Adobe Reader makes temporary fonts for good quality and fast printing, using methods Microsoft have recommended for over 15 years. Adobe Reader then cleans up the fonts, but Microsoft in their wisdom stop the fonts from being deleted until the session has finished (by which time Adobe Reader cannot, by definition, be running to delete them). It's hard to imagine what planet Microsoft were on when they decided this was a good solution to whatever the problem was. You can stop Adobe Reader from making fonts for printing by using "print as image" but you can see what this does to print time and quality.

We had this fixed until 10/16 when updates occurred on our systems. This is the list that was installed, and one or more caused the problem to reoccur. Any idea which of the 34 possibilities? I have started with OS updates, but have not had much luck with deducing the culprit. Also, on 10/15 Adobe Reader was updated to 10.1.4, but I don't think this was the cause, because our files started accumulating on the 16th.

This one modifies the Win32k.sys file. This file was also modified in the original culprit KB

Based on the version of the Win32k.sys file I should have if I had installed KB2993651 I believe KB3000061 is what is causing the problem in October. I am going to test this, but it will be Monday 10-27-14 before I know for sure. If you can test sooner please let us know.

I can reproduce the issue every time by printing from a pdf and logging off.

We had all currently recommended microsoft windows hotfixes installed as of 17/10/2014.

I got it fixed by uninstalling the following updates (similar to what jc2it suggested):

KB2993651

KB2982791

KB3000061

(Hotfix 2970228 we don't have installed)

Until I uninstalled all 3 of those hotfixes the issue was not fixed and even reinstalling 2993651 later on causes this issue to come back.

The key to resolving this seems to be removing whichever hotfix(s) bring down updated versions of: win32k.sys and gdi32.dll.

The versions of these files that the issue doesn't occur with for me is:

win32k.sys

Version: 6.1.7601.18512

Date: 18/06/2014 1:10pm

gdi32.dll

Version: 6.1.7601.18275

Date: 3/10/2013 3:23pm

Also I noticed much faster printing of PDF files from acrobat reader after removing these hotfixes, before removal the printing dialog box would stay on the screen for a while, now it's pretty much instant.